All;

    I am running syslog-ng 3.25 and am trying to log the boot messages to boot.log. This is my configuration:

@define logdir "/var/log/CLIENTS/$YEAR/$MONTH_ABBREV/$DAY/$HOST"

filter f_boot {

    facility( local7 )

};

destination d_boot {

    file( "`logdir`/boot.log" );

};

log {

    source( s_local );

    source( s_network );

    filter( f_boot );

    destination( d_boot );

};

source s_local {

    system( );

    internal( );

};

The problem that I have is that the file is being created in /var/log, not in “logdir”. Perhaps the reason for that could be that the syslog-ng service is started later in the boot process. Any insight at all would be greatly appreciated.

Thanks;

Frank